I am highly critical of Apple's heavy handed "approval" requirements for apps coupled with not allowing users to sideload, but if they're going to do it anyway ostensibly for protecting the user, the least they could do it is block the clearly exploitative loot-box approach.